https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T21:39:21.244897+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-22880 CVE-2026-22880 — Mobile SSO authentication flow allows credential theft via malicious server 2026-09-29T21:39:21.254503+00:00

Affected: Mattermost

Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an attacker controlling a malicious Mattermost server to steal user credentials for a legitimate Mattermost server via relaying the SSO code exchange flow through the mobile application. Mattermost Advisory ID: MMSA-2025-00564